Deployment
Three ways to run it
Choose where the software runs and who looks after it day to day. It is the same product in each case.
Your servers, your team
You run it on your servers. We never see your data.
For organisations that cannot let a supplier near personal data.
We operate it in your environmentYour servers, our team
It runs on your servers. We look after it for you.
For teams who want the data to stay in-house but don't want to run the software.
We host and operate itOur cloud
We host and run it for you in India.
For teams who want to be up and running in weeks, not months.
In detail
What each option means
Your servers, your team
The vault runs on your servers. Neither your data nor your keys ever reach us. We supply the software, updates and support. Nothing is sent back to us, and we can put that in the contract.
Your apps, CRM and other systems connect to the vault inside your network. They use a token day to day, and the real value stays in one place.
Keys stay in your own key service — OpenBao or HashiCorp Vault, in front of your HSM if you have one. We never see them.
Your servers, our team
The vault stays in your data centre. We run it with named, background-checked engineers who get only the access they need, and every session is recorded.
Your systems connect to it inside your network, just as they would if you ran it yourself. We keep it healthy.
Keys stay in your key service. Our engineers run the vault, but the keys never leave it.
Our cloud
Hosted in India. The contract says where it runs, who else can access it and how long we keep things.
Your systems connect to it over a secure link. Our security commitments are listed in the agreement, one by one.
Separate keys for every customer, held in a dedicated key service in India and rotated automatically.
Connecting your systems
Your systems connect the same way in every option
When the vault runs on your servers, your apps, CRM and payment systems connect to it inside your own network. They use a token day to day, and the real value stays in one place.
In our cloud it works the same way, over a secure link to India.
Not sure which fits?
We'll talk it through with you and your security team.